Branches for Squeeze

Name Status Last Modified Last Commit
lp:debian/squeeze/tinyproxy 1 Development 2012-09-24 21:05:41 UTC
14. * Add patches for CVE-2012-3505 (clos...

Author: Jordi Mallach
Revision Date: 2012-09-24 21:05:41 UTC

* Add patches for CVE-2012-3505 (closes: #685281):
  - CVE-2012-3505-tinyproxy-limit-headers.patch: Limit the number of
    headers to prevent DoS attacks.
  - CVE-2012-3505-tinyproxy-randomized-hashmaps.patch: Randomize hashmaps
    in order to avoid fake headers getting included in the same bucket,
    allowing for DoS attacks.
  Bug reported and patches contributed by gpernot.

11 of 1 result